Re: Reverse proxy and wireshark

2013-04-06 Thread Larry
Thank you both of you, I admit I started worrying on the basis of wrong information/comprehension. Now it is ok, and I can keep up my nginx config with the x-accel variables. Thanks again, and sincerely sorry I bothered you for such thing. Regards, Larry Posted at Nginx Forum: http://forum.n

Re: Reverse proxy and wireshark

2013-04-06 Thread Jonathan Matthews
On 6 April 2013 15:27, Larry wrote: > Reassuring but everywhere on the web, you can see wireshark sniffing in/out > packet to any server. No you can't. > Hence, they are not connected to the server to sniff packets. Your conclusion is wrong as it is based on incorrect information. > That is wh

Re: Reverse proxy and wireshark

2013-04-06 Thread Larry
Reassuring but everywhere on the web, you can see wireshark sniffing in/out packet to any server. Hence, they are not connected to the server to sniff packets. That is why I started worrying actually ! Posted at Nginx Forum: http://forum.nginx.org/read.php?2,238162,238166#msg-238166 __

Re: Reverse proxy and wireshark

2013-04-06 Thread Richard Kearsley
any hacker will need to be inside your server or have some administration over the network to find those ips On 06/04/13 15:01, Larry wrote: My concern is that a hacker is able to know my other ips over europe. My host is not a problem. The real deal is the outgoing packets I don't want extern

Re: Reverse proxy and wireshark

2013-04-06 Thread Larry
My concern is that a hacker is able to know my other ips over europe. My host is not a problem. The real deal is the outgoing packets I don't want external people to know where they are going to. It would defeat the whole purpose of reverse proxy.. Posted at Nginx Forum: http://forum.nginx.org/

Re: Reverse proxy and wireshark

2013-04-06 Thread Richard Kearsley
If you run wireshark on your main box, you will be able to see the ips it connects to (but not the urls because of https). However they would need to be logged into your box to run wireshark and at this point they could just run a netstat command to find the ips it is connected to. If you mean c

Reverse proxy and wireshark

2013-04-06 Thread Larry
Hello, I am suddenly worrying about something simple : I have a box that send some traffic with proxy_pass to get files from another of my box faking the url. Hence acting as a reverse proxy. All the connections are ssl covered. Right. But is the whole reverse proxy broken if one listen with w